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• Data recovered from two event recorders showed that a Metro-North train that derailed in 
New York City, which killed 4 passengers and injured 63 others, was speeding at 82 miles 
per hour when the accident occurred. - Associated Press (See item 8) 

• The U.S. Food and Drug Administration shut down Alfred Louie Inc., operations following 
the discovery of Listeria in sprouts processed and distributed at the facility. - KERO 23 
Bakersfield (See item 16 ) 

• A gas leak at Princeton University prompted the evacuation of about 500 people and 11 
university buildings for more than 2 hours. - WCBS 2 New York City (See item 26 ) 

• Microsoft stated that a recently discovered zero-day vulnerability affecting Windows XP 
and Windows Server 2003 was being actively exploited - SC Magazine (See item 33 ) 
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Energy Sector 



1. December 2, Forum of Fargo-Moorhead - (North Dakota) ND health department 
monitors spill near McGregor. Petro-Hunt reported a 200-barrel spill at an oil well 
near McGregor that released flowback water. The North Dakota Department of Health 
is monitoring the cleanup efforts. 

Source: http://www.inforum.com/event/article/id/420017/ 

2. December 2, Forum of Fargo-Moorhead - (North Dakota) Valve leak causes oil, 
saltwater spill near Maxbass. The North Dakota Department of Mineral Resources 
reported that 50 barrels of oil and 300 barrels of saltwater were released November 29 
at the Denbury Onshore-owned Fossum B3 water injection well in Bottineau County. A 
valve leak at the water injection well caused the spill that was contained to the well site 
and recovered. 

Source: http://www.inforum.com/event/article/id/420014/group/homepage/ 

T Return to top i 

Chemical Industry Sector 

Nothing to report 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

3. December 3, Associated Press - (New York) Nine Mile Point 2 nuclear reactor shuts 
down with pump problems. The Unit 2 reactor at the Nine Mile Point nuclear power 
plant in Scriba shut down December 2 after water circulation pumps shut off while 
being changed to a lower speed. 

Source: http://www.therepublic.com/view/story/e33el3b9ffab452aa82c40723cf6dlfa/N 
Y —Nine-Mile-Shutdown 

4. December 1, South Jersey Times - (New Jersey) Hope Creek nuclear plant goes 
offline after moisture problem in main turbine. The Hope Creek nuclear power plant 
in Lower Alloways Creek Township shut down December 1 due to high levels of 
moisture in the steam powering the plant’s turbine. 

Source: http://www.ni.com/salem/index.ssf/2013/12/hope creek nuclear plant goes of 
fline after moisture problem in main turbine .html#incart river 

T Return to top i 

Critical Manufacturing Sector 

5. December 3, U.S. Consumer Product Safety Commission - (National) Crown Boiler 
recalls home heating boilers due to carbon monoxide hazard. Crown Boiler 
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announced a recall of about 2,200 gas-fired hot water boilers due to the potential for the 
air pressure switch to fail to shut down the burners in the event of a blockage, emitting 
hazardous amounts of carbon monoxide. 

Source: http://www.cpsc.gov/en/Recalls/2014/Crown-Boiler-Recalls-Home-Heating- 
B oilers/ 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

6. December 2, Las Vegas Review- Journal - (Nevada) Company owners plead guilty in 
scheme to clear credit histories. Five people, out of 10 charged, pleaded guilty to their 
role in running a Las Vegas-based credit score forgery scheme that used fake police 
documents and other methods to falsely improve the credit scores of customers. 

Source: http://www.reviewiournal.com/news/companv-owners-plead-guiltv-scheme- 
clear-credit-histories 

7. December 2, WNYT 13 Albany - (New York) Fifth arrest made after credit card 
skimming in Glenmont. A New York City man was charged along with four 
employees of the Golden Town Buffet in Glenmont with allegedly running a $55,000 
payment card skimming scheme at the restaurant. 

Source: http://wnyt.com/article/stories/S3232957.shtml?cat=300 

For another story, see item 30 
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Transportation Systems Sector 

8. December 3, Associated Press; Middletown Times Herald-Record - (New York) Train 
speed was 82 mph prior to wreck. The National Transportation Safety Board 
investigators reported that the Metro-North Hudson line commuter train that derailed in 
the Bronx area of New York City December 1, killing 4 passengers and injuring 63 
others, was speeding at 82 miles per hour when the accident occurred. The preliminary 
findings are based on data recovered from the train's two event recorders. 

Source: 

http://www.recordonline.com/apps/pbcs.dll/article?AID=/201 3 1203/NEWS/3 12030333 

9. December 3, AviationPros.com - (Kansas) FAA proposes $304,000 civil penalty 
against Great Lakes Aviation. The U.S. Federal Aviation Administration proposed a 
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$304,000 civil penalty against Great Lakes Aviation of Cheyenne, Wyoming, for 
allegedly conducting 19 flights with aircraft in Kansas where frost, snow, or ice could 
have adhered to the planes and was not in compliance with Federal Aviation 
Regulations. 

Source: http://www.aviationpros.com/news/11258373/the-federal-aviation- 

administration-faa-is-proposing-a-304000-civil-penalty-against-great-lakes-aviation-of- 

cheyenne-wyo 

10. December 2, Forum of Fargo-Moorhead - (North Dakota) BNSF line reopens after 
empty oil tankers derail. BNSF Railway reopened its line near Minot December 2 
following an accident involving a semi-truck that caused nine empty oil tanker cars to 
derail December 1. 

Source: http://www.inforum.com/event/article/id/420015/ 

11. December 2, Boise Idaho Statesman - (Idaho) Search for missing airplane in Valley 
County ends for the day. Authorities searched for a single-engine plane that was 
headed to Butte, Montana, with five people on-board that went missing near the 
Johnson Creek Airstrip in Yellow Pine after reporting engine trouble December 1. 
Source: http://www.idahostatesman.com/2013/12/02/2904446/small-airplane-went- 
missing-over.html 

12. December 2, Hawaii News Now - (Hawaii) Kauai landslide shuts down road, causes 
power and water outages. Two landslides in Waimea caused large boulders, trees, and 
mud to fall along Menehune Road, prompting its closure, while crews worked to clear 
the roadway of the debris December 2. 

Source: http://www.hawaiinewsnow.com/story/24114859/kauai-landslide-shuts-down- 
major-road-causes-power-and-water-outages 

13. December 2, Dallas Business Journal - (Texas) FAA proposes $325K penalty for 
Southwest over plane's maintenance. The Federal Aviation Administration proposed 
a $325,000 civil penalty against Dallas-based Southwest Airlines for allegedly 
operating a Boeing 717 airplane August 29, 2011 that had an improperly installed 
switch that was in violation of Federal Aviation Regulations. 

Source: http://www.bizioumals.eom/dallas/news/2013/12/02/faa-proposes-325k- 
penalty-for.html 

14. December 2, KIRO 7 Seattle - (Washington) De-icer causes crashes, closure of West 
Seattle Bridge. Multiple accidents believed to be caused by a de-icing mixture that was 
placed on the roads caused the closure of West Seattle Bridge and eastbound and 
westbound lanes of the Alaskan Way Viaduct December 2. 

Source: http://www.kirotv.com/news/news/west-seattle-bridge-closed- 
collisions/nb84R/ 



For another story, see item 18 
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Food and Agriculture Sector 



15. December 2, Food Safety News - (National) Missouri meat processor recalls beef 
and pork products for possible E. coli. Cloud’s Meats, Inc., of Carthage, Missouri, 
voluntarily recalled 1,450 pounds of meat products after the Missouri Department of 
Agriculture’s Meat and Poultry Inspection Program’s November 14 sample tests came 
up positive for E. coli. 

Source: http://www.foodsafetvnews.com/2013/12/missouri-meat-company-recalls- 
beef-and-pork-products-for-possible-e-coli/ 

16. December 2, KERO 23 Bakersfield - (California) Alfred Louie, Bakersfield soybean 
sprout company, shut down by FDA. Alfred Louie Inc., of Bakersfield was told to 
shut down operations by the U.S. Food and Drug Administration following the April 
discovery of Listeria in sprouts processed and distributed at the facility. 

Source: http://www.turnto23.com/news/local-news/alfred-louie-bakersfield-sovbean- 
sprout-company-shut-down-by-fda- 1 202 1 3 
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Water and Wastewater Systems Sector 

17. December 2, Salina Journal - (Kansas) Former Hays wastewater treatment plant 
superintendent fined. The City of Hays’s former wastewater treatment plant 
superintendent pleaded guilty to one misdemeanor count of negligent discharge of a 
pollutant, a violation of the Clean Water Act. He was sentenced to one year federal 
probation and a $2,500 fine. 

Source: http://www.salina.com/news/wastewaterl2-2-13 

18. December 2, Hawaii News Now - (Hawaii) Water main break closes lanes on 
Dillingham Boulevard. A 12-inch water main break in Kalihi December 2 at the 
intersection of Dillingham Boulevard and Kohou closed streets between Kokea and 
Kohou as repairs were expected to continue through December 3. 

Source: http://www.hawaiinewsnow.com/story/24117046/traffic-alert-water-main- 
break-closes-lanes-on-dillingham-boulevard 

19. December 2, Syracuse Post Standard - (New York) Ithaca officials want to know 
who poured massive amount of chemicals into public sanitary sewer system. 
Authorities in Ithaca reported that a significant amount of chemicals were dumped into 
the city’s sanitary sewer system, killing microorganisms used at the Ithaca Area 
Wastewater Treatment Facility to clean water discharged into Cayuga Lake. Authorities 
have yet to determine the source and if the act was intentional or accidental. 

Source: 

http://www.syracuse.com/news/index.ssf/2013/12/ithaca officials want to know who 
poured large volume of chemicals into public s.html 
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Healthcare and Public Health Sector 



See item 37 
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Government Facilities Sector 

20. December 3, WGHP 8 High Point - (North Carolina) Yadkin Co. school bus 
overturns, 12 injured. A Yadkin County school bus overturned near Yadkinville 
December 3 leaving 11 people injured and transported to area hospitals. 

Source: http://mvfox8.com/2013/12/03/yadkin-co-school-bus-wrecks-with-children-on- 
board / 

21. December 3, Lompoc Record - (California) Fourth case of meningitis reported at 
UC Santa Barbara. The University of California, Santa Barbara expanded their 
program to provide antibiotics to more than 500 students who were identified as having 
had close contact with three students who contracted meningococcal disease after a 
fourth case within a month was confirmed by the university. 

Source: http://www.lompocrecord.com/news/local/fourth-case-of-meningitis-reported- 
at-uc-santa-barbara/article 3d0644f2-5bef-l Ie3-b3ff-0019bb2963f4.html 

22. December 2, Hanford Sentinel - (California) Internet post sparks police lockdown at 
four Hanford high schools. Four high schools in Hanford, California, were locked 
down for 2 hours December 2 after a threat was posted on a social media Web site. 
Authorities lifted the lockdown after searching all four schools and deeming them safe. 
Source: http://www.hanfordsentinel.com/news/local/full-story-internet-post-sparks- 
police-lockdown-at-four-hanford/article 9431ffe2-5bb2-lle3-b3ff-001a4bcf887a.html 

23. December 2, Washington Post - (Virginia) Fairfax chemical spill causes school 
evacuation, sends two staffers to hospital. Two staff members were transported to a 
hospital December 2 after a hydrochloric acid spill at South Lakes High School in 
Reston forced two wings of the school to shut down for 3 hours before officials deemed 
the situation resolved. 

Source: http://www.washingtonpost.com/local/education/fairfax-chemical-spill-causes- 
school-evacuation-sends-two-staffers-to-hospital/ 

24. December 2, Sioux City Journal - (Iowa) Remsen-Union classes resume Tuesday 
after bogus bomb threat. Classes were cancelled at Remsen-Union Community 
School in Iowa December 2 after a staff member reported a possible bomb threat that 
prompted an evacuation for several hours as law enforcement searched the campus and 
eventually deemed it safe. 

Source: http://siouxcitvioumal.com/news/local/crime-and-courts/remsen-union-classes- 
resume-tuesday-after-bogus-bomb-threat/ 

25. December 2, Philadelphia Inquirer - (New Jersey) N.J. college campus shut down 
after bomb threat. Atlantic Cape Community College in southern New Jersey 
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cancelled classes and shut down its campus December 2 after a phoned bomb threat. 
Classes were scheduled to resume December 3. 

Source: 

http://www.philly.com/phillv/news/new jersey/NJ college campus shut down after 
bomb threat.html 



26. December 2, Associated Press; WCBS 2 New York City - (New Jersey) Gas leak 
prompts evacuation at Princeton University. Eleven Princeton University buildings 
were evacuated for more than 2 hours December 2 due to a gas leak after a backhoe 
struck a gas line near the McCosh Health Center. 

Source: http://newvork.cbslocal.com/2013/12/02/gas-leak-prompts-evacuation-at- 
princeton-university/ 

27. December 2, Jackson Clarion-Ledger - (Mississippi) 5 injured in Madison County 
school bus accident. A Velma Jackson High School bus and a car collided December 2 
in Madison County, Mississippi, leaving 5 people injured. 

Source: http ://w w w .clarionledger .com/article/20 131 202/NEWS/ 1 3 1 202003/5 -injured- 
Madison-County-school-bus-accident 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

28. December 3, Softpedia - (International) Flaw in Android 4.3 can be exploited to 
remove device locks with rogue apps. Researchers at Curesec identified a 
vulnerability in Android 4.3 that can be exploited using a rogue app to disable a 
device’s security features such as PINs and passwords. The researchers produced a 
proof-of-concept app demonstrating the issue. 

Source: http://news.softpedia.com/news/Flaw-in-Android-4-3-Can-Be-Exploited-to- 
Remove-Device-Locks- with-Rogue- Apps-405 536 . shtml 

29. December 3, Help Net Security - (International) Huge quantity of Bitcoins stolen 
from Sheep Marketplace. The administrators of the Sheep Marketplace underweb 
market reported to their users that a vendor allegedly broke into the market and stole 
5,400 Bitcoins. 

Source: http://www.net-security.org/secworld.php?id=16037 

30. December 3, Softpedia - (International) 706 domains used to sell counterfeit items 
seized by international law enforcement. U.S., European Union, and Hong Kong 
authorities seized a total of 706 domain names used to advertise and sell counterfeit 
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goods. 

Source: http://news.softpedia.com/news/706-Domains-Used-to-Sell- 
Counterfeit-Items-Seized-bv-International-Law-Enforcement-4056 1 1 .shtml 

31. December 3, Threatpost - (International) Acoustical mesh network used to infect 
air-gapped computers. Researchers published a paper demonstrating how acoustic 
devices such as speakers and microphones can be used to send data between 
computers that are ‘air-gapped’ and not connected to the Internet or a network. 

Source: http://threatpost.com/acoustical-mesh-network-used-to-infect-air-gapped- 
computers/ 103079 

32. December 3, Dark Reading - (International) Study: 340,000 new malicious websites 
detected in past 30 days. A study conducted by Commtouch found that the number 
of malicious Web sites is growing quickly, with an average of 11,500 new threats 
identified each day. Malware sites made up the majority of malicious sites, followed 
by phishing and spam sites. 

Source: http://www.darkreading.com/studv-340000-new-malicious-websites- 
dete/240164387 

33. December 2, SC Magazine - (International) Windows XP zero-day under active 
attack. Microsoft stated that a recently discovered zero-day vulnerability affecting 
Windows XP and Windows Server 2003 has been observed being exploited in 
targeted attacks. The vulnerability can allow privilege escalation, kernel mode code 
execution, and administrator account creation. 

Source: http://www.scmagazine.com/windows-xp-zero-day-under-active- 
attack/article/323303/ 

34. December 2, Help Net Security - (International) Legitimate apps bundled up with 
secret Bitcoin miner. Malwarebytes researchers identified a Bitcoin miner added to 
Mutual Public’s YourFreeProxy software that can drain users’ system resources and 
strain hardware. 

Source: http://www.net-security.org/malware news.php?id=2639 

35. December 2, SC Magazine - (International) Popular Bitcoin forum targeted in 
DNS and DDoS attack. The administrators of the BitcoinTalk forum advised their 
users to avoid logging in for a time December 2 after the site was hit by domain name 
system (DNS) redirection and distributed denial of service (DDoS) attacks. 

Source: http://www.scmagazine.com//popular-bitcoin-forum-targeted-in-dns- 
and-ddos-attack/article/32331 1/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

36. December 3, Denver Post - (Colorado) Attic fire in Denver apartment building 
forces dozens to evacuate. An electrical fire in a mechanical room was likely the 
cause of a fire at the Valley Park apartments in Denver December 3 that forced 
around 70 residents to evacuate the building. Residents were displaced and had to 
find temporary housing due to water and electricity being shut off in the building. 
Source: http://www.denverpost.com/breakingnews/ci 24643 848/attic-fire-denver- 
apartment-building-forces-dozens-evacuate 

37. December 3, Associated Press - (Nevada) Tests confirm norovirus as cause of 
Vegas outbreak. Southern Nevada Health District officials confirmed norovirus was 
behind an outbreak at a youth football tournament at the Rio casino in Las Vegas that 
sickened more than 90 people. 

Source: http://abcnews.go.com/US/wireStorv/tests-confirm-norovirus-vegas-outbreak- 
21074216 

38. December 2, CBS 2 Los Angeles - (California) Bomb threat cleared after 
evacuations orders at Long Beach Walmart. A Walmart at the City Place Shopping 
Center in Long Beach received a bomb threat December 2 that prompted police to 
evacuate the store for over 2 hours. 

Source: http://losangeles.cbslocal.com/2013/12/02/bomb-threat-cleared-after- 
evacuations-ordered-at-long-beach-walmart/ 
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Dams Sector 

39. December 3, Baton Rouge Advocate - (Louisiana) Floodgates planned to slow 
storm surge from Vermilion Bay. The Iberia Parish Levee, Hurricane, and 
Conservation District began design and permitting for a planned flood gate on the 
Delcambre Canal, to work in conjunction with a planned Bayou Tigre floodgate 
approved by the Vermillion Parish Police Jury. 

Source: http://theadvocate.com/home/7692247-125/floodgates-planned-to-slow-storm 
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summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 10 - 




